Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/D63D48DE604F11F0B5D8E73CC4F9AE02.roa
File:                     D63D48DE604F11F0B5D8E73CC4F9AE02.roa (raw, json)
Hash identifier:          GzEU2vPIPXvKY5i0weDDpP3E/LtJoH+OnTw04IroV1I=
Subject key identifier:   77:C4:40:07:31:C6:E6:A5:07:B8:C0:30:8E:5E:3C:E3:98:8B:44:6E
Certificate issuer:       /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
Certificate serial:       7C
Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/D63D48DE604F11F0B5D8E73CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:12:21 +0000
ROA not before:           Wed 27 Aug 2025 08:43:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136254
IP address blocks:        103.153.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl
                          rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:07:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907
        Validity
            Not Before: Aug 27 08:43:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3f4e5-5a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:31:08:9c:bb:4e:70:57:55:fb:98:77:98:
                    b9:1e:f0:ca:d7:78:bb:1e:40:27:f2:f3:48:f5:91:
                    53:99:16:22:4a:8e:3d:4d:ca:f1:cc:52:58:08:f2:
                    84:06:d4:0d:e5:60:1e:b2:e7:49:d9:f3:d7:b3:31:
                    70:0f:8e:17:7c:ee:71:cd:1b:38:18:11:6a:16:3b:
                    67:1d:70:9a:84:1e:0a:0f:2d:b8:87:4a:15:27:19:
                    2e:52:c0:ad:29:03:8f:98:27:a4:90:cc:31:76:c9:
                    b8:10:14:85:99:c3:1a:1b:f0:0e:46:b7:b9:37:9c:
                    30:ac:8e:0f:5e:c3:52:f1:0d:ff:f7:84:c2:fe:86:
                    90:a1:98:c7:18:ec:14:6f:52:2d:d9:41:e3:37:3e:
                    66:cd:b2:2c:41:2c:43:4e:38:da:bc:b5:17:d9:c2:
                    34:37:fa:e0:30:bc:90:42:07:2e:ef:c7:ff:c9:a8:
                    cc:61:92:b6:30:4b:25:8c:10:4f:cf:55:8f:b4:76:
                    a1:a8:c6:bd:f3:15:a0:24:ea:3e:a5:70:dc:8a:d1:
                    37:a4:14:c1:0f:55:d0:0b:c1:14:3f:54:84:79:d3:
                    17:10:fc:31:39:b8:bd:22:f3:d3:e7:86:64:a5:ab:
                    34:9c:a4:8f:d2:2c:b2:d7:82:71:dc:45:18:20:16:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C4:40:07:31:C6:E6:A5:07:B8:C0:30:8E:5E:3C:E3:98:8B:44:6E
            X509v3 Authority Key Identifier:
                keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/D63D48DE604F11F0B5D8E73CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:98:89:16:1c:05:bf:d4:76:f4:f1:84:92:9a:d7:74:3f:73:
         bd:f5:81:a6:e2:be:09:09:e1:e4:f4:e1:f5:3a:d7:14:51:d9:
         9c:b5:23:04:4e:81:ab:d0:dd:b4:3c:fe:d3:6f:0c:a9:34:f4:
         20:50:29:77:5b:2a:e6:0a:ec:01:4d:65:af:5b:37:51:d0:1b:
         a8:89:31:f5:91:9e:7d:9f:ca:c3:bf:fa:ff:e7:4e:d3:e5:6e:
         7a:6d:82:cb:81:ba:4e:b7:ca:72:40:8f:9a:5c:b9:47:cc:a0:
         60:3f:67:a4:36:8e:19:08:3e:d5:04:f4:0d:eb:9c:c5:e6:0c:
         8c:46:f3:e9:54:35:25:30:16:48:04:eb:88:6c:92:2c:f3:94:
         74:ad:3b:5e:54:16:36:3b:f7:69:c5:d9:8a:11:0a:71:05:be:
         c8:2c:e4:0a:ef:e0:f4:ee:08:50:a1:7d:e0:a2:c4:78:fd:55:
         ce:4a:8d:a8:a8:6f:57:37:6a:4a:a9:9b:55:75:bb:63:28:ce:
         69:12:fb:98:ca:46:91:95:6d:85:e3:cb:d3:a6:de:9a:c3:aa:
         c4:84:05:c9:c5:9e:9a:74:59:bd:df:86:ec:1a:b6:42:b8:ff:
         d7:83:d2:04:f8:9f:97:8c:5e:fc:0f:18:be:f1:08:25:4e:d1:
         3d:ee:87:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:07 2026 by rpki-client